Overview

overview

7

Static

static

1

eaa2b2f4b5...18.exe

windows7-x64

7

eaa2b2f4b5...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaa2b2f4b5fedae2a1e176860220726b_JaffaCakes118

  • Size

    295KB

  • Sample

    240919-fqfd5asbre

  • MD5

    eaa2b2f4b5fedae2a1e176860220726b

  • SHA1

    b2d13d592297c62edd3ddc36e08b7f87193d8fe1

  • SHA256

    58d156bde0c23520045ee45934abcb7644171e1e329b72e8fc8858abb859167b

  • SHA512

    3907733b5f7648f76f341e0f5c757a3fa9be2d677b79ae4e52968c0ec95c7718093a7ec2bcbe86585e2a07c27ada0d12508e34c11e8a5d52814e6397ea53b25d

  • SSDEEP

    6144:/iGtsLoAlqNC+Y+1PTG/qm/PgCnmUSFMhl4R+M/oI29OKK:KGtsLTt+d1PTEn/iUSFM8R+rI2ZK

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      eaa2b2f4b5fedae2a1e176860220726b_JaffaCakes118

    • Size

      295KB

    • MD5

      eaa2b2f4b5fedae2a1e176860220726b

    • SHA1

      b2d13d592297c62edd3ddc36e08b7f87193d8fe1

    • SHA256

      58d156bde0c23520045ee45934abcb7644171e1e329b72e8fc8858abb859167b

    • SHA512

      3907733b5f7648f76f341e0f5c757a3fa9be2d677b79ae4e52968c0ec95c7718093a7ec2bcbe86585e2a07c27ada0d12508e34c11e8a5d52814e6397ea53b25d

    • SSDEEP

      6144:/iGtsLoAlqNC+Y+1PTG/qm/PgCnmUSFMhl4R+M/oI29OKK:KGtsLTt+d1PTEn/iUSFM8R+rI2ZK

    Score
    7/10
    discoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks